$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255c0b1a-e956-3d5e-87f4-b3aaa8976576.roa File: 255c0b1a-e956-3d5e-87f4-b3aaa8976576.roa (raw, json) Hash identifier: FjugRH9B0LBZx/HxYCi9BLWO1LmLYaJNXBOsEA+4EVw= Subject key identifier: F6:E2:DF:D7:E7:52:BD:68:C1:E1:1E:1F:90:D3:79:0B:D6:23:A0:B9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787C13E576F3BFB475C4380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255c0b1a-e956-3d5e-87f4-b3aaa8976576.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 35.212.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:c1:3e:57:6f:3b:fb:47:5c:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e845f8ac-fa72-4843-b9c5-5e3383883404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:86:b8:5b:4d:19:7b:1e:9d:97:6b:dd:17: 46:c3:b1:0e:cc:bf:cd:44:4e:0b:bb:63:b9:ca:8c: 45:e2:8a:85:ed:77:64:7e:cd:fa:21:7e:45:65:d5: 86:35:4a:2f:67:77:d3:68:c4:82:6b:e7:c7:a1:37: 16:2c:35:b4:79:8a:fa:11:a5:00:5c:ad:9d:41:8b: 69:56:54:51:91:25:ac:9e:4c:30:d5:fd:27:29:31: e0:83:33:b4:d3:64:95:e9:7d:10:44:1d:46:15:b4: 79:a9:01:2a:4f:94:65:c0:8d:ac:dc:db:22:ad:5e: 79:40:6a:de:87:27:27:e3:5a:08:66:2d:6c:1c:83: bb:81:88:16:63:bb:66:44:4c:07:83:8c:21:4c:53: bc:c5:c9:13:dc:33:95:87:55:d2:c7:c6:f4:d7:c5: 3b:e2:fd:b4:f9:9a:30:e0:0a:62:6c:1c:b4:bd:71: 23:6d:1b:78:2f:40:59:37:c2:9e:6a:64:e8:70:38: c5:01:50:f4:bc:41:97:8e:c4:c3:bc:61:5c:1c:c8: 27:d0:f8:67:a3:a5:df:51:fc:c3:e8:4b:ba:bc:ad: 16:fe:64:50:0d:f9:d0:42:9a:01:55:d0:39:2a:66: 86:b4:07:76:13:6e:58:48:bd:b4:0f:22:9f:37:33: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E2:DF:D7:E7:52:BD:68:C1:E1:1E:1F:90:D3:79:0B:D6:23:A0:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255c0b1a-e956-3d5e-87f4-b3aaa8976576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d7:5e:6c:17:e4:8e:c9:bf:b3:ad:d4:6a:f2:80:cb:31:fc: 22:99:52:df:36:96:17:4b:46:1f:74:86:b5:21:80:d0:35:45: 77:4a:4f:cb:c3:96:da:4f:bf:1e:78:b5:b1:23:b2:9c:5b:4e: 34:9a:97:b3:d1:4e:a2:1a:0a:3f:10:8c:e6:27:9e:ff:3e:71: 41:70:ee:db:75:c9:46:75:68:04:a1:b7:2a:8f:40:5e:d1:22: f3:3e:9b:fd:9b:4f:81:e3:69:23:4c:de:66:da:2f:9e:aa:62: d3:c3:2c:0d:41:ab:ea:f6:a8:07:52:71:c9:13:54:b8:cd:7f: 12:28:4c:9a:57:6f:1e:07:49:01:eb:81:75:fb:9a:93:a7:28: db:62:9d:a8:03:ca:c1:fd:4d:dc:ae:91:de:e0:ae:f3:94:89: aa:a2:02:9a:5e:5c:05:0e:e2:9a:81:e6:c7:3d:ac:5e:c0:47: 57:5d:55:d8:fa:56:d9:1a:b9:0c:c2:8d:38:0a:98:91:73:82: 1b:99:cc:c9:17:34:b0:b3:18:43:a9:24:e0:b0:2d:50:c3:71: c0:16:86:8f:b9:43:42:c6:81:ec:69:2f:12:a4:83:c2:04:5a: 60:00:59:77:97:dd:b5:e9:fc:59:0c:d5:5a:2c:cd:d5:67:e0: f2:f1:94:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh8E+V287+0dcQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTg0NWY4YWMtZmE3Mi00ODQzLWI5YzUtNWUzMzgzODgzNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5KGuFtNGXsenZdr3RdGw7EOzL/NRE4Lu2O5 yoxF4oqF7Xdkfs36IX5FZdWGNUovZ3fTaMSCa+fHoTcWLDW0eYr6EaUAXK2dQYtp VlRRkSWsnkww1f0nKTHggzO002SV6X0QRB1GFbR5qQEqT5RlwI2s3NsirV55QGre hycn41oIZi1sHIO7gYgWY7tmREwHg4whTFO8xckT3DOVh1XSx8b018U74v20+Zow 4ApibBy0vXEjbRt4L0BZN8KeamTocDjFAVD0vEGXjsTDvGFcHMgn0Phno6XfUfzD 6Eu6vK0W/mRQDfnQQpoBVdA5KmaGtAd2E25YSL20DyKfNzMKCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbi39fnUr1oweEeH5DTeQvWI6C5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjU1YzBiMWEtZTk1Ni0z ZDVlLTg3ZjQtYjNhYWE4OTc2NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7XXmwX5I7Jv7Ot1GrygMsx/CKZUt82lhdLRh90hrUhgNA1RXdKT8vD ltpPvx54tbEjspxbTjSal7PRTqIaCj8QjOYnnv8+cUFw7tt1yUZ1aAShtyqPQF7R IvM+m/2bT4HjaSNM3mbaL56qYtPDLA1Bq+r2qAdScckTVLjNfxIoTJpXbx4HSQHr gXX7mpOnKNtinagDysH9Tdyukd7grvOUiaqiAppeXAUO4pqB5sc9rF7AR1ddVdj6 VtkauQzCjTgKmJFzghuZzMkXNLCzGEOpJOCwLVDDccAWho+5Q0LGgexpLxKkg8IE WmAAWXeX3bXp/FkM1VoszdVn4PLxlBM= -----END CERTIFICATE-----Generated at Sat Aug 22 21:11:40 2026 by rpki-client